Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Advisory: Dell Secure Connect Gateway-Appliance, Secure Connect Gateway-Application — dell.com/support/kbdoc/en-us/000225910/dsa-2024-181-securit… Clear all filters
TI-2024-19338 CVE-2024-29169 · GHSA-97x2-r642-2777

SQL injection in Dell Secure Connect Gateway-Application

Priority LOW 38

Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal audit REST API.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00435 Published 2024-06-13 No fix listed CWE-89
TI-2024-19337 CVE-2024-29168 · GHSA-2h63-f9v2-w77r

SQL injection in Dell Secure Connect Gateway-Application

Priority LOW 38

Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST API.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0047 Published 2024-06-13 No fix listed CWE-89
TI-2024-19160 CVE-2024-28969 · GHSA-gv35-xq5j-3wj5

Improper access control in Dell Secure Connect Gateway-Application

Priority LOW 22

Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API (if enabled by Admin user from UI).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00424 Published 2024-06-13 No fix listed CWE-284
TI-2024-19159 CVE-2024-28968 · GHSA-ph46-7fpg-mqx8

Improper access control in Dell Secure Connect Gateway-Application

Priority LOW 26

Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for internal email and collection settings REST APIs (if enabled by Admin user from UI).

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00349 Published 2024-06-13 No fix listed CWE-284
TI-2024-19158 CVE-2024-28967 · GHSA-3vhf-gvj3-rcch

Improper access control in Dell Secure Connect Gateway-Application

Priority LOW 26

Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal maintenance REST API (if enabled by Admin user from UI).

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00349 Published 2024-06-13 No fix listed CWE-284
TI-2024-19157 CVE-2024-28966 · GHSA-v9rm-3p9p-c283

Improper access control in Dell Secure Connect Gateway-Application

Priority LOW 24

Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API (if enabled by Admin user from UI).

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00349 Published 2024-06-13 No fix listed CWE-284
TI-2024-19156 CVE-2024-28965 · GHSA-93f8-hx2v-qxcp

Improper access control in Dell Secure Connect Gateway-Application

Priority LOW 24

Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal enable REST API (if enabled by Admin user from UI).

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00349 Published 2024-06-13 No fix listed CWE-284